manage-mounts

Manage Mounts

Configure which host directories NanoClaw agent containers can access. The mount allowlist lives at ~/.config/nanoclaw/mount-allowlist.json.

Show Current Config

cat ~/.config/nanoclaw/mount-allowlist.json 2>/dev/null || echo "No mount allowlist configured"

Show the current config to the user in a readable format: which directories are allowed, whether non-main agents are read-only.

Add Directories

Ask which directories the user wants agents to access. For each path:

• Validate the path exists
• Ask if it should be read-only for non-main agents (default: yes)

Build the JSON config and write it:

npx tsx setup/index.ts --step mounts --force -- --json '{"allowedRoots":[{"path":"/path/to/dir","readOnly":false}],"blockedPatterns":[],"nonMainReadOnly":true}'

Use --force to overwrite the existing config.

Remove Directories

Read the current config, show it, ask which entry to remove, write the updated config.

Reset to Empty

npx tsx setup/index.ts --step mounts --force -- --empty

After Changes

Restart the service so containers pick up the new config (the unit/label names are per-install — see setup/lib/install-slug.sh).

Run from your NanoClaw project root:

source setup/lib/install-slug.sh
launchctl kickstart -k gui/$(id -u)/$(launchd_label)  # macOS
systemctl --user restart $(systemd_unit)              # Linux